Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6993cdfb-9e3f-4002-86d9-48f6a690e4ab.roa
File:                     6993cdfb-9e3f-4002-86d9-48f6a690e4ab.roa (raw, json)
Hash identifier:          FuP0rme3l8ot8eeCSPCqkBAaRVDLdJ1w1nZNCWZqTLs=
Subject key identifier:   F1:56:BA:31:3D:51:A9:83:3F:08:CF:2E:24:DC:50:9B:77:61:E8:20
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       18619F677F1AE21E307D0E4B2CD3B06AD57E6889
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6993cdfb-9e3f-4002-86d9-48f6a690e4ab.roa
Signing time:             Fri 03 Jan 2025 00:00:00 +0000
ROA not before:           Fri 03 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        204.246.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:9f:67:7f:1a:e2:1e:30:7d:0e:4b:2c:d3:b0:6a:d5:7e:68:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jan  3 00:00:00 2025 GMT
            Not After : Feb  7 23:59:59 2025 GMT
        Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:1f:f5:40:cb:ad:7f:51:f9:50:f5:62:c6:
                    60:35:99:35:4d:af:9c:90:d0:34:76:2d:8e:10:3b:
                    6c:13:5d:56:4c:78:4f:94:e9:37:d8:a1:ea:81:53:
                    c7:80:c0:c5:13:1c:a5:99:3c:89:48:f6:e0:ef:2c:
                    8f:25:f3:51:14:b1:7f:50:61:02:7a:3d:d6:45:65:
                    0f:18:e0:67:7c:96:bd:d4:38:4f:83:17:f0:1b:4f:
                    c0:15:03:de:df:d5:1f:f7:b4:31:e6:73:ad:79:e4:
                    3b:65:06:f2:99:7b:51:2b:97:71:6c:7d:2a:8e:6d:
                    d3:ce:b8:4b:be:ab:95:38:60:56:fa:96:d7:5b:68:
                    a0:56:5a:04:3e:1e:91:3e:70:82:b7:f3:db:7a:0a:
                    0e:58:87:a6:40:66:57:14:93:45:30:ed:60:3f:4d:
                    37:1e:a0:d9:70:2b:61:ed:32:d3:9c:a7:c4:c1:30:
                    09:07:fc:99:dd:c4:77:06:98:38:79:dc:e4:f1:f8:
                    5d:3b:1a:40:3d:cf:1f:93:c0:71:84:28:9d:49:d0:
                    6d:56:62:3e:0f:62:e1:a8:34:7c:50:1f:25:8c:7f:
                    a6:0f:4f:31:86:3a:83:a5:23:62:19:c5:04:e5:ae:
                    4d:8c:6a:21:49:eb:a3:12:b3:63:d4:c9:77:b5:9c:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:56:BA:31:3D:51:A9:83:3F:08:CF:2E:24:DC:50:9B:77:61:E8:20
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6993cdfb-9e3f-4002-86d9-48f6a690e4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:09:6d:20:a3:2e:0f:5f:7f:3b:0d:fa:8b:a8:88:1f:f6:
         a5:08:9e:a8:6c:33:45:b9:e9:f2:fc:bb:f0:e4:50:ef:4b:bf:
         b1:3a:cc:61:56:6c:a9:43:c0:83:65:ae:7a:3a:63:40:91:67:
         1b:d2:82:8c:1e:fb:14:06:c7:b1:d7:a1:75:16:69:aa:d2:35:
         67:64:91:29:01:39:26:8e:8c:54:2d:5e:08:bb:01:39:e1:1e:
         ac:f3:ce:0f:c7:95:3e:a1:46:55:6a:c8:eb:77:c4:0c:22:41:
         ff:1f:e7:6e:c9:e5:ae:b8:d5:4a:31:97:48:d4:46:80:92:cb:
         05:a8:e2:27:6f:e8:71:28:7f:35:b4:00:14:df:5a:26:0d:35:
         92:a0:bf:43:7a:46:16:42:cb:13:2a:c0:f1:4e:62:72:d8:ae:
         32:a6:3c:29:90:a0:52:62:87:17:a9:24:17:2d:32:43:e2:e5:
         0e:dc:55:b6:45:36:c8:e7:a9:89:8a:61:c9:7d:92:65:c4:51:
         d4:56:7a:0d:ad:fe:0c:42:c6:39:74:3f:f9:da:15:48:53:ec:
         a3:85:04:23:7d:50:4f:9c:16:cd:46:0d:25:5b:dd:fb:ac:91:
         c9:da:bb:f1:4f:7e:0c:3d:95:b2:10:22:e4:78:86:84:31:19:
         d3:61:9c:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGGGfZ38a4h4wfQ5LLNOwatV+aIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwMTAzMDAwMDAwWhcNMjUwMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNmY5YmI3NjI1MGE3YzVjNGZlZmFjYjE4ZGM5NWE2N2M0
YWE5NDAwOTUyNmFhMjljNDUyZWM2NmQ0YTRhMGY3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCelx/1QMutf1H5UPVixmA1mTVNr5yQ0DR2LY4QO2wTXVZM
eE+U6TfYoeqBU8eAwMUTHKWZPIlI9uDvLI8l81EUsX9QYQJ6PdZFZQ8Y4Gd8lr3U
OE+DF/AbT8AVA97f1R/3tDHmc6155DtlBvKZe1Erl3FsfSqObdPOuEu+q5U4YFb6
ltdbaKBWWgQ+HpE+cIK389t6Cg5Yh6ZAZlcUk0Uw7WA/TTceoNlwK2HtMtOcp8TB
MAkH/JndxHcGmDh53OTx+F07GkA9zx+TwHGEKJ1J0G1WYj4PYuGoNHxQHyWMf6YP
TzGGOoOlI2IZxQTlrk2MaiFJ66MSs2PUyXe1nP0ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8Va6MT1RqYM/CM8uJNxQm3dh6CAwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzY5OTNjZGZiLTllM2YtNDAwMi04NmQ5LTQ4ZjZhNjkwZTRhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXM9qAwDQYJKoZIhvcNAQELBQADggEBAEi4CW0goy4PX387DfqLqIgf9qUI
nqhsM0W56fL8u/DkUO9Lv7E6zGFWbKlDwINlrno6Y0CRZxvSgowe+xQGx7HXoXUW
aarSNWdkkSkBOSaOjFQtXgi7ATnhHqzzzg/HlT6hRlVqyOt3xAwiQf8f527J5a64
1Uoxl0jURoCSywWo4idv6HEofzW0ABTfWiYNNZKgv0N6RhZCyxMqwPFOYnLYrjKm
PCmQoFJihxepJBctMkPi5Q7cVbZFNsjnqYmKYcl9kmXEUdRWeg2t/gxCxjl0P/na
FUhT7KOFBCN9UE+cFs1GDSVb3fuskcnau/FPfgw9lbIQIuR4hoQxGdNhnK8=
-----END CERTIFICATE-----